CVE-2019-19003 ABB eSOMS: HTTPOnly flag not set

For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allow Javascript to access the cookie contents, which in turn might enable Cross Site Scripting...

CVE-2019-19003

ABB eSOMS (Electronic Shift Operations Management System)

Unspecified Vulnerability in ABB eSOMS (CNVD-2020-19565)

ABB eSOMS Electronic Shift Operations Management System is a plant operations management system from ABB Switzerland. ABB eSOMS contains a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

ABB eSOMS Information Disclosure Vulnerability

ABB eSOMS is a plant operations management system from ABB Switzerland. An information disclosure vulnerability exists in ABB eSOMS, which can be exploited by attackers to conduct cross-site scripting attacks...

ABB eSOMS Encryption Issues Vulnerabilities

ABB eSOMS is a plant operations management system from ABB Switzerland. ABB eSOMS suffers from a cryptographic vulnerability that could be exploited by an attacker to eavesdrop on or intercept connections enabled with such passwords...

Unspecified Vulnerability in ABB eSOMS (CNVD-2020-19566)

ABB eSOMS Electronic Shift Operations Management System is a plant operations management system from ABB Switzerland. A security vulnerability exists in ABB eSOMS due to an unset HTTPOnly flag, which can be exploited by attackers to conduct cross-site scripting attacks...

ABB eSOMS Weak Password Vulnerability

ABB eSOMS is a plant operations management system from ABB Switzerland. ABB eSOMS suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

ABB eSOMS Identity Information Validation Error Vulnerability

ABB eSOMS is a plant operations management system from ABB Switzerland. ABB eSOMS suffers from an Identity Information Validation Error vulnerability that can be exploited by an attacker to make changes to Viewstate...

Unspecified Vulnerability in ABB eSOMS (CNVD-2020-19561)

ABB eSOMS is a plant operations management system from ABB Switzerland. ABB eSOMS contains a security vulnerability that originates from not setting a security flag in the HTTP response header, which can be exploited by an attacker to obtain cookie information...

ICSA-20-072-01_ABB eSOMS

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: eSOMS Vulnerabilities: Use of Web Browser Cache Containing Sensitive Information, Improper Restriction of Rendered UI Layers or Frames, Improper Neutralization of HTTP Headers for...

PT-2020-6878 · Abb +1 · Abb Esoms +1

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 to 6.0.3 Description: The issue is related to the ASP.NET Viewstate component of the ABB eSOMS software, which lacks authentication for a critical function. This could allow a remote attacker to disclose protected...

PT-2020-6879 · Abb · Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 through 6.0.3 Description: The issue is related to the improper configuration of the Cache-Control and Pragma HTTP headers within the application response. This can potentially allow browsers and proxies to cache...

PT-2020-6891 · Abb · Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 to 6.0.2 Description: The issue is related to inadequate input/output validation, which might allow an attacker to perform stored cross-site scripting by storing malicious content in the database. This could potentially...

PT-2020-1843 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 3.9 to 6.0.3 Description: The issue is related to a lack of input checks for SQL queries, which might allow an attacker to perform SQL injection attacks against the backend database. This could potentially be exploited by a...

PT-2020-6880 · Abb · Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 through 6.0.2 Description: The issue is related to the absence of the HttpOnly flag in session cookies, which can allow JavaScript to access the cookie contents. This might enable Cross Site Scripting XSS attacks, where...

PT-2020-6881 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 to 6.0.3 Description: The issue is related to errors in processing requests, which can allow a remote attacker to disclose protected information. Specifically, HTTPS responses contain comments with sensitive information...

PT-2020-6876 · Abb · Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 to 6.0.2 Description: The issue is related to the absence of the X-Frame-Options header in the HTTP response, which can potentially allow 'ClickJacking' attacks. This type of attack occurs when an attacker frames parts ...

PT-2020-6877 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 through 6.0.2 Description: The issue is related to the absence of the X-XSS-Protection HTTP response header in responses from the web server. This might increase the risk of Cross Site Scripting XSS attacks, particularl...

PT-2020-6875 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 6.0 through 6.0.2 Description: The issue is related to the storage of credentials in a recoverable format by the Redis data structure component used in ABB eSOMS. This can potentially allow an attacker to gain unauthorized...

CVE-2018-14805

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability...